$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft File: qzsSgRukXmOSsAXTQfk6DQfyqxw.mft (raw, json) Hash identifier: WzVNcrWZA8f65P21PVREAeczicPyoXUeOWQpwkmdCf0= Subject key identifier: 27:2B:9F:4D:23:AB:45:2E:7D:4F:20:B7:78:12:DF:73:D9:81:0C:EB Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C Certificate issuer: /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft Manifest number: 01B5 Signing time: Wed 23 Jul 2025 03:20:10 +0000 Manifest this update: Wed 23 Jul 2025 03:20:09 +0000 Manifest next update: Wed 30 Jul 2025 03:20:09 +0000 Files and hashes: 1: qzsSgRukXmOSsAXTQfk6DQfyqxw.crl (hash: gaw0b3WJWRwMOQl7d7X0PSYcKAnkKkzWyy4FLVBgTwM=) 2: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (hash: RRFkv0+MhucpLar3G+6nK3AMY5KxybMxRqr09USf+uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 03:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918557B, serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C Validity Not Before: Jul 23 03:20:09 2025 GMT Not After : Jul 30 03:20:09 2025 GMT Subject: CN=688054ea-b080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:51:43:ec:37:1f:8a:09:bd:e0:d1:12:33: 98:0a:67:f2:29:42:d6:fe:db:6e:af:17:89:4f:48: b8:6d:a5:73:2b:62:52:4d:f7:ad:d0:12:3c:3c:36: f7:4c:e5:b4:de:78:1f:02:42:36:d7:44:69:ff:a9: 93:b3:a8:49:dc:6d:6f:e0:c6:57:52:f5:ae:32:3d: 7a:05:c3:64:75:17:2f:54:46:f1:2d:8a:a1:07:cf: bc:ee:34:95:07:0a:0b:d3:18:54:e2:90:55:dd:e8: 94:f3:20:58:80:fe:a6:84:a5:c3:9f:58:8d:e8:e8: e3:cc:b4:4d:db:10:4d:2c:f3:18:85:5a:76:45:8e: e8:f8:73:1d:27:2e:ef:03:37:10:a1:2e:32:ef:00: 8f:51:6d:b0:78:a7:29:6c:c3:7b:29:bc:fd:01:af: ea:04:61:8b:8b:cc:de:70:09:7b:9c:99:b3:85:59: ca:22:9c:30:34:9c:04:5e:64:b3:2e:80:20:7c:f9: c3:68:13:8b:a2:2f:9d:57:79:b2:d9:cd:4d:5f:30: 32:cf:e7:98:8f:7e:98:39:f8:90:13:93:fd:eb:f0: 69:e1:5d:e1:cf:b7:4e:5e:af:70:64:8b:93:f9:5a: 2c:18:da:1c:9c:a4:77:46:20:d1:87:63:3f:fa:54: 9a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2B:9F:4D:23:AB:45:2E:7D:4F:20:B7:78:12:DF:73:D9:81:0C:EB X509v3 Authority Key Identifier: keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:4c:43:66:44:1d:53:3d:74:6a:6c:f9:f8:78:2d:4c:8b:c8: 6b:2d:56:c6:be:6b:e4:d0:b7:53:4c:a9:a4:ca:b8:be:75:6c: e6:fb:be:96:20:b6:70:d1:49:d3:09:e9:bf:ad:05:ca:56:d7: a3:07:8b:8e:68:cf:49:b7:50:fe:c6:a5:5d:c5:8b:9e:4c:59: 2c:b4:c3:4a:c3:a7:96:9c:c8:5f:50:5f:2e:52:f4:a6:a0:5c: 6f:00:3c:e9:56:66:e7:f8:35:44:84:df:31:a9:c3:c6:a8:77: 53:d6:a9:35:b7:b4:b2:33:0e:06:46:82:a4:43:ae:04:61:7f: 9a:39:50:ea:b3:91:1e:09:f3:13:71:3d:de:37:da:49:e8:05: 92:f6:e6:61:26:30:5b:57:73:6b:e6:01:3e:4f:a6:22:fe:9a: e6:67:f2:c3:42:0a:78:18:90:30:c8:15:60:f9:ec:7d:a0:e3: 9d:64:6f:bc:b6:b9:b6:78:4d:0f:b2:de:08:24:f6:a2:ef:8e: a1:c1:0c:87:c6:62:b6:fb:de:2b:da:19:ff:b8:35:58:18:5f: f4:eb:8f:72:56:09:a6:7d:ee:8a:d6:c2:02:65:e7:3d:2f:18: 63:fe:bd:a7:ee:56:20:e1:40:a5:78:e1:67:cf:9e:7d:de:fb: 85:05:75:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU1N0IxMTAvBgNVBAUTKEFCM0IxMjgxMUJBNDVFNjM5MkIwMDVEMzQxRjkzQTBE MDdGMkFCMUMwHhcNMjUwNzIzMDMyMDA5WhcNMjUwNzMwMDMyMDA5WjAYMRYwFAYD VQQDEw02ODgwNTRlYS1iMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDZRQ+w3H4oJveDREjOYCmfyKULW/tturxeJT0i4baVzK2JSTfet0BI8PDb3 TOW03ngfAkI210Rp/6mTs6hJ3G1v4MZXUvWuMj16BcNkdRcvVEbxLYqhB8+87jSV BwoL0xhU4pBV3eiU8yBYgP6mhKXDn1iN6OjjzLRN2xBNLPMYhVp2RY7o+HMdJy7v AzcQoS4y7wCPUW2weKcpbMN7Kbz9Aa/qBGGLi8zecAl7nJmzhVnKIpwwNJwEXmSz LoAgfPnDaBOLoi+dV3my2c1NXzAyz+eYj36YOfiQE5P96/Bp4V3hz7dOXq9wZIuT +VosGNocnKR3RiDRh2M/+lSatwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcrn00j q0UufU8gt3gS33PZgQzrMB8GA1UdIwQYMBaAFKs7EoEbpF5jkrAF00H5Og0H8qsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTU3Qi9EQjRFRDYwNkM5 NEExMUVEOTMwMTZEMzhDNEY5QUUwMi9xenNTZ1J1a1htT1NzQVhUUWZrNkRRZnlx eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6c1NnUnVrWG1PU3NBWFRRZms2RFFmeXF4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTU3Qi9EQjRFRDYwNkM5NEExMUVEOTMwMTZEMzhDNEY5QUUwMi9xenNTZ1J1a1ht T1NzQVhUUWZrNkRRZnlxeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2TENmRB1TPXRqbPn4eC1Mi8hrLVbGvmvk0LdTTKmkyri+dWzm+76W ILZw0UnTCem/rQXKVtejB4uOaM9Jt1D+xqVdxYueTFkstMNKw6eWnMhfUF8uUvSm oFxvADzpVmbn+DVEhN8xqcPGqHdT1qk1t7SyMw4GRoKkQ64EYX+aOVDqs5EeCfMT cT3eN9pJ6AWS9uZhJjBbV3Nr5gE+T6Yi/prmZ/LDQgp4GJAwyBVg+ex9oOOdZG+8 trm2eE0Pst4IJPai746hwQyHxmK2+94r2hn/uDVYGF/0649yVgmmfe6K1sICZec9 Lxhj/r2n7lYg4UCleOFnz5593vuFBXUs -----END CERTIFICATE-----Generated at Wed Jul 23 09:05:52 2025 by rpki-client